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Top Stories 

• Four people were injured July 24 when a vehicle collided with a semi-truck on Interstate 95 
in Chesterfield County, Virginia, prompting the 12-hour closure of southbound lanes 
before authorities reopened all but two lanes. - WTVR 6 Richmond (See item 10 ) 

• An outpatient opened fire July 24 at the Mercy Wellness Center in Delaware County, 
Pennsylvania, killing a caseworker and injuring a doctor who reportedly exchanged gunfire 
with the suspect, wounding the outpatient. - USA Today (See item 17 ) 

• The U.S. State Department announced July 24 that its main computer system for 
processing visa and passport applications worldwide was brought back online at limited 
capacity after it crashed during the week of July 21 during routine maintenance on the 
consular database. - IDG News Service (See item 19 ) 

• Two people died and 31 others were injured July 24 when a tornado ripped through the 
Cherrystone Campground in Capes Charles, Virginia, prompting the evacuation of about 
1,300 people and damaging several motor homes. - Reuters (See item 30 ) 
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Energy Sector 



1. July 25, Associated Press - (California) 26,000 customers lose power in Irvine after 
fire at substation, restored for most. Over 26,000 Southern California Edison 
customers in Irvine lost power July 24 due to a transformer fire at an Orange County 
substation. About 8,000 customers remained without service several hours later while 
crews worked to restore power. 

Source: 

http://www.tribtown.com/view/story/499b24b 1 a606454799 1 39220c2fff4ab/C A— 
Power-Station-Fire 

2. July 24, U.S. Environmental Protection Agency - (National) Seven New England 
companies take action to improve oil spill prevention measures under settlements. 
The U.S. Environmental Protection Agency announced July 24 that a saltwater marina 
company, a tour and charter bus company, an oil company, a tool and instrument 
manufacturer, an oil and propane delivery company, and a utility company were among 
the seven companies in New England that were required to pay penalties totaling 
$29,900 for not having adequate spill prevention plans. All seven companies reported 
that they are now in compliance with spill prevention requirements. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/0DABE16B4204EF6485257DlF00634B89 

3. July 24, U.S. Environmental Protection Agency - (California) U.S. EPA requires 
Rancho LPG to comply with safety measures for community protection. Rancho 
LPG will pay $260,000 to settle U.S. Environmental Protection Agency violations at its 
San Pedro, California facility. The agency announced July 24 that the company 
resolved its noncompliance with risk management plan regulations as required by the 
federal Clean Air Act. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/138E8D63E8B80F8385257DlF006F5DF9 
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Chemical Industry Sector 

4. July 24, WBTV 3 Charlotte - (North Carolina) Chemical spill being cleaned up along 
railway in Charlotte. Nearly 150 gallons of Vinyl Acetate spilled along a railway in 
Charlotte and prompted a nearly 2 hour closure of a local roadway. Firefighters 
contained the spill and a private contractor was hired to clean the scene. 

Source: http://www.wbtv.com/story/26102028/hazmat-crews-working-spill-along- 
railway- in-charlotte 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

See item 2 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. July 24, U.S. Securities and Exchange Commission - (New York) Morgan Stanley to 
pay $275M to settle subprime charges. Morgan Stanley agreed July 24 to pay $275 
million to harmed investors to resolve allegations by the U.S. Securities and Exchange 
Commission that three of the investment firm’s entities misrepresented the delinquency 
status of mortgage loans and misled investors in the sale of more than $2.5 billion in 
residential mortgage-backed securities (RMBS). 

Source: http ://w w w. sec. go v/New s/Pres sRelease/Detail/Pres sRelease/ 1370542355594 

6. July 24, Reuters - (National) Bank of America to pay $16.6 million to resolve U.S. 
sanctions violations. The U.S. Treasury Department announced July 24 that Bank of 
America agreed to pay $16.6 million in penalties to resolve allegations that the 
financial institution knowingly processed about $91,000 in transactions for six 
designated narcotics traffickers subject to U.S. sanctions between 2005 and 2009. A 
Bank of America representative stated that the bank addressed the problem in 2009 
when it improved its sanctions -related systems and controls. 

Source: http://www.reuters.com/article/2014/07/24/us-bankofamerica-sanctions- 
settlement-idUSKBNOFT 1 V220 1 40724 

For another story, see item 25 
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Transportation Systems Sector 

7. July 25, WCCO 4 Minneapolis - (Minnesota) 4-vehicle crash on I-35W in Roseville 
stalls A.M. commute. A Metro Mobility van and two other vehicles crashed into a 
semi-truck that lost control on southbound Interstate 35 in Roseville and went over the 
guardrail into the northbound lanes July 25. One person was injured and northbound 
lanes of the interstate were expected to be shut down for several hours while authorities 
investigated the crash and cleaned up the area. 

Source: http://minnesota.cbslocal.com/2014/07/25/crash-closes-interstate-35w-in- 
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roseville/ 



8. July 24, Associated Press; KOMO 4 Seattle - (Washington) Oil train derails under 
Seattle’s Magnolia Bridge. Five rail cars on a Burlington Northern Santa Fe train 
carrying oil derailed at a rail yard in Seattle under Magnolia Bridge July 24 shortly 
after departing causing one tilted tanker to be pumped out and removed for repairs. No 
spillage occurred and no injuries were reported while crews spent several hours 
repairing the track. 

Source: http://www.komonews.com/news/local/Oil-train-derails-under-Seattles- 
Magnolia-Bridge-268442612.html 

9. July 24, KTVT 11 Fort Worth - (Texas) Collapsed traffic sign leaves NB 820 closed 
in Hurst. A traffic sign collapsed and fell onto northbound lanes of East Loop 820 in 
Hurst July 24 when a vehicle drove into a support beam at Highway 10, closing 
northbound lanes for more than 4 hours. 

Source: http://dfw.cbslocal.com/2014/07/24/collapsed-traffic-sign-leaves-nb-820- 
closed-in-hurst/ 

10. July 24, WTVR 6 Richmond - (Virginia) All lanes back open after tanker truck 
overturns on 1-95. Four people were injured in an accident involving a vehicle that 
collided with a semi-truck carrying gasoline on Interstate 95 in Chesterfield County 
July 24 prompting the 12-hour closure of southbound lanes before authorities reopened 
all but two lanes. Crews worked to pump out gasoline from the overturned semi-truck 
in order to contain the leak and clear the scene. 

Source: http://wtvr.com/2014/07/24/interstate-95-tractor-trailer-crash/ 

For additional stories, see items 2 and 13 
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Food and Agriculture Sector 

1 1 . July 25, WNYW 5 New York City - (New York) Bronx supermarket fire. A child and 
two firefighters were injured when a 5-alarm fire broke out July 25 and spread 
throughout the Food Dynasty grocery store in the Bronx area of New York City. 
Firefighters contained the blaze before it spread to adjacent structures, while the 
buildings were evacuated as a precaution. 

Source: http://www.rnvfoxnv.com/story/261 10851/bronx-supermarket-fire 

12. July 25, WPXI 11 Pittsburgh - (Pennsylvania) Truck plows into Penn Hills Dairy 
Queen; 5 hurt. Authorities are investigating after the driver of a pickup truck lost 
control of the vehicle and crashed into a Dairy Queen in Penn Hill July 24, injuring 5 
people. Impact from the accident caused a gas leak, which prompted crews to shut off 
gas and electric service in the area. 

Source: http://www.wpxi.com/news/news/local/vehicle-crashes-penn-hills-dairy- 
queen/ngm5B/ 
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13. July 24, WTEV 47 Jacksonville - (Florida) Discount Seafood employee describes 
barely escaping crash. The driver of a Coca-Cola semi-truck lost control of the 
vehicle and struck a Jacksonville Transportation Authority (JTA) bus before it crashed 
into the Discount Seafood building in Jacksonville July 23. The building was 
demolished for safety reasons and 5 JTA passengers were transported to a local 
hospital. 

Source: http://www.actionnewsiax.com/news/news/local/discount-seafood-employee- 
describes-barely-escapin/ngnGX/ 

14. July 24, U.S. Food and Drug Administration - (International) Lion Pavilion issues 
alert on undeclared sulfites in Tasty Peach Slices. The U.S. Food and Drug 
Administration announced July 24 that Lion Pavilion LTD., issued a recall for 3.87- 
ounce containers of its Tasty Peach Slices which were produced in China and 
distributed throughout the U.S., due to undeclared sulfites. The issue was found during 
routine sampling by New York State Department of Agriculture and Markets Food 
Inspectors, and no illnesses have been reported. 

Source: http://www.fda.gov/Safety/Recalls/ucm406623.htm 

15. July 24, U.S. Department of Agriculture - (Texas) Texas firm recalls ready-to-eat 
products for possible Listeria contamination. The Food Safety and Inspection 
Service announced July 24 that Great American Marketing issued a recall for about 475 
pounds of ready-to-eat sandwich and wrap products produced on July 15 and shipped to 
retailers in Texas due to possible Listeria contamination. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-048-20 14-release 
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Water and Wastewater Systems Sector 

16. July 24, Spokane Spokesman-Review - (Idaho) Sewage spills into Lake Coeur 

d’Alene at Arrow Point. A pump failure in a septic effluent lift station was discovered 
July 23 and determined to be the cause of an accidental release of an estimated 1,320 
gallons of sewage into Lake Coeur d’Alene at the Arrow Point Marina. A new pump 
was installed and the system is under normal operations. 

Source: http://www.spokesman.com/stories/2014/iul/24/sewage-spills-lake-coeur- 
dalene-arrow-point/ 
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Healthcare and Public Health Sector 

17. July 24, USA Today - (Pennsylvania) Pa. doctor shoots patient who killed 

caseworker. A psychiatric outpatient opened fire July 24 in an office at the Mercy 
Wellness Center of Mercy Fitzgerald Hospital in Delaware County, Pennsylvania, 
killing a caseworker and injuring a doctor who reportedly exchanged gunfire with the 
suspect, wounding the outpatient. 



-5 - 



Source: http://www.llalive.com/storv/news/nation/2014/07/24/shooting-wellness- 
center/13 118213/ 



18. July 24, Greenwood Index- Journal - (South Carolina) Self Regional announces 
security breach of patient info. Self Regional Healthcare in Greenwood notified at 
least 500 patients July 24 of a potential security breach after two thieves broke into the 
Support Services Center May 25 and took a hospital-owned laptop. Police arrested and 
charged two men June 10 in connection with the theft where one of the suspects 
admitted to panicking and throwing the password protected laptop into Lake 
Thurmond. 

Source: http://www.indexioumal.com/Content/Default/Homepage-Rotating- 
Articles/Article/Self-Regional-announces-securitv-breach-of-patient-info/-3/225/26721 



T Return to top i 



Government Facilities Sector 

19. July 24, IDG News Service - (International) State Department computer crash slows 
visa, passport applications worldwide. The U.S. State Department announced July 24 
that its main computer system for processing visa and passport applications worldwide 
crashed during the week of July 21 after routine maintenance on the consular database. 
The system was brought back online but remained at limited capacity while officials 
worked to correct the problem. 

Source: http://www.networkworld.com/article/245 818 1/state-department-computer- 
crash-slows-visa-passport-applications-worldwide.html 

20. July 24, Arizona Republic - (Arizona) Phoenix police recover $56,000 in stolen 
computers. Four teenagers could face charges in connection to stealing about 50 Mac 
computers worth about $56,000 from the Desert Sands Middle School in Maryvale 
between July 22 and July 23. Police found almost all of the stolen equipment in a trailer 
after apprehending a suspect who returned to the school and set off a burglary alarm. 
Source: http://www.azcentral.com/story/news/local/phoenix/2014/07/25/dozens-of- 
computers-recovered-in-middle-school-burglary-abrk/13 145341/ 

[ Return to top ] 

Emergency Services Sector 

21. July 25, KWTV 9 Oklahoma City - (Oklahoma) Authorities: Inmate escapes from 
minimum security prison in El Reno. Officials are searching for and investigating 
how an inmate escaped from the Satellite Prison Camp in El Reno July 24. 

Source: http://www.news9.com/storv/26111668/authorities-inmate-escapes-from- 
minimum-security-prison-in-el-reno 

22. July 24, KSAT 12 San Antonio - (Texas) 2 arrested in theft of Jaws of Life from fire 
station. Police arrested two men July 23 in connection to stealing and attempting to sell 
about $20,000 worth of equipment from Bexar County’s District 2 fire station in San 
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Antonio. Authorities are still searching for a third suspect believed to be connected to 
the theft. 

Source: http://www.ksat.com/content/pns/ksat/news/2014/07/24/2-arrested-in-theft-of— 
iaws-of-life-from-fire-station.html 
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Information Technology Sector 

23. July 25, Threatpost - (International) TAILS team recommends workarounds for 
flaw in I2P. TAILS operating system developers claimed a vulnerability in the I2P 
anonymity network software affecting versions 1.1 and earlier can be mitigated with a 
couple of workarounds, though the vulnerability has yet to be patched. 

Source: http://threatpost.com/tails-team-recommends-workarounds-for-flaw-in- 
i2p/ 107422 

24. July 25, Softpedia - (International) Cloud botnets used for mining crypto-currency. 
Researchers from Bishop Fox created a botnet capable of mining several hundred 
dollars in Litecoin crypto -currency on a daily basis using free services of multiple 
cloud-computing businesses. Conducted distributed denial of service (DDoS) attacks 
was determined to be another way to use the machines. 

Source: http://news.softpedia.com/news/Cloud-Botnets-Used-for-Mining-Crypto- 
Currency-452030.shtml 

25. July 24, SC Magazine - (International) Sony to shell out $15M in PSN breach 
settlement. Sony released a statement July 24 claiming it reached an agreement to pay 
$15 million in a preliminary settlement associated with the April 2011 hacking of its 
PlayStation Network system, its on-demand service Qriocity, and gaming portal Sony 
Online Entertainment, exposing the personal data of roughly 77 million users. 

Source: http://www.scmagazine.com/sonv-to-shell-out-15m-in-psn-breach- 
settlement/article/362720/ 

26. July 24, Threatpost - (International) More details of Onion/Critroni crypto 
ransomware emerge. Kaspersky Lab and other researchers found that the Critroni or 
CTB-Locker dubbed Onion uses a number of features that separate it from other forms 
of malware including that the ransomware is spread through Andromeda using a 
version of the asymmetric ECDH (Elliptic Curve Diffie-Hellman) algorithm. 

Source: http://threatpost.com/onion-ransomware-demands-bitcoins-uses-tor-advanced- 
encryption/ 107408 

27. July 24, Softpedia - (International) Popular wireless home alarms can be hacked 
from afar. Two security researchers found that wireless home alarm systems are 
vulnerable to remote hijacking which would allow for access into the protected 
environment without tripping the alarm due to the signals lack of encryption or 
authentication. The tools used to hack into systems are available for purchase, 
potentially allowing intruders to completely disable the alarm from 10 feet. 

Source: http://news.softpedia.com/news/Popular-Wireless-Home-Alarms-Are-Easy-to- 
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Hack-45 2023 . shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 



\ Return to topi 



Commercial Facilities Sector 

28. July 25, Gardnerville Record-Courier - (Nevada) Two injured in Tahoe hotel fire. 
Authorities are investigating the source of a July 23 fire that caused an estimated $2.5 
million in damage and injured two individuals at the Deerfield Lodge hotel in South 
Lake Tahoe. At least 6 hotel rooms and 5 vehicles were damaged or destroyed, and 35 
people were displaced. 

Source: http://www.recordcourier.com/news/12346740-113/fire-tahoe-lake-south 

29. July 25, Associated Press - (Maine) Fire displaces dozens of residents from 
Lewiston apartment building; not considered suspicious. Fire officials believe an 
electrical short in the attic of a Lewiston apartment building may have caused 
insulation to catch fire and spread throughout the building. About 40 residents were 
displaced by the blaze. 

Source: 

http://www.therepublic.com/view/storv/585068293224416ea81a561357ea709f/ME~ 

Apartment-Fire-Lewiston 

30. July 24, Reuters - (Virginia) Storm kills two, injures 31 at Virginia campground. A 
tornado likely ripped through the Cherrystone Campground in Capes Charles July 24, 
killing two individuals and injuring 31 others. About 1,300 people were evacuated from 
the campground after the storm overturned vehicles and trees smashed through the 
roofs of motor homes. 

Source: http://www.reuters.com/article/2014/07/25/us-usa-virginia-storm- 
idUSKBN0FTlWI20140725 

31. July 24, KWWL 7 Waterloo - (Iowa) Dick's Sporting Goods in Dubuque reports 
arson lire Thursday. Authorities are investigating a possible arson fire that was set 
July 24 at a Dick’s Sporting Goods store located inside the Kennedy Mall in Dubuque. 
The store was closed for about 2 hours while officials cleared the scene. 
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Source: http://www.kwwl.com/storv/26106003/2014/07/24/dicks-sporting-goods-in- 
dubuque-reports-arson-fire-thursday 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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